$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft File: o0K4Har3eauhbTK2-wuDD4ULT_A.mft (raw, json) Hash identifier: nujp25eNlpVQYXEFMjLJzfnIT1M+n86hNz2mztSb4mM= Subject key identifier: 19:03:FB:E1:54:2D:0F:89:7D:94:C6:F8:B1:E3:0A:36:FE:AD:01:7F Authority key identifier: A3:42:B8:1D:AA:F7:79:AB:A1:6D:32:B6:FB:0B:83:0F:85:0B:4F:F0 Certificate issuer: /CN=A91A1205/serialNumber=A342B81DAAF779ABA16D32B6FB0B830F850B4FF0 Certificate serial: 0BEA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft Manifest number: 0BE4 Signing time: Wed 02 Jul 2025 19:01:35 +0000 Manifest this update: Wed 02 Jul 2025 19:01:34 +0000 Manifest next update: Wed 09 Jul 2025 19:01:34 +0000 Files and hashes: 1: o0K4Har3eauhbTK2-wuDD4ULT_A.crl (hash: P8i+c992YY51Gqj8klGACjYBBZpCl7zImDCM5QoBqho=) 2: 3D992D3A1A8411EAA026D229C4F9AE02.roa (hash: j0DWhsEHoal3Q4LsD1CyE+J4i6jhKjEMjW9pXFwYCvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.crl rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3050 (0xbea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1205, serialNumber=A342B81DAAF779ABA16D32B6FB0B830F850B4FF0 Validity Not Before: Jul 2 19:01:34 2025 GMT Not After : Jul 9 19:01:34 2025 GMT Subject: CN=6865820e-c9e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b0:58:3c:3c:72:7c:7a:03:a7:5c:8a:3b:67: 85:c3:c5:e0:13:4f:40:dd:da:9a:ef:72:cd:a5:09: 4d:20:6e:a0:65:19:a4:0e:c0:95:04:64:89:71:61: 6a:dc:ef:99:fc:1e:04:42:03:5d:eb:b4:e1:f2:48: 3b:f7:9b:7a:f5:fe:42:aa:4a:f1:43:75:1c:fd:c7: 7c:19:05:7c:60:e1:2c:b8:6e:5e:c8:fc:9f:42:88: 91:c9:5b:12:43:e0:28:0e:56:cb:85:ec:82:27:9d: 2b:b9:c9:11:80:4a:6c:24:f4:81:1d:6b:1b:67:7e: ba:fa:c2:a9:42:39:80:40:a5:60:d0:14:df:4c:f8: 8c:a9:d5:62:80:f0:a8:c7:9f:c2:2d:b4:1d:0f:90: 23:af:d9:61:28:29:8b:d5:70:fb:1e:a2:fd:2f:14: 92:27:11:d1:10:51:11:d2:2e:52:54:f6:6d:13:e6: fe:ea:5d:6c:13:ab:5c:7c:98:f1:e4:29:22:0c:2f: 6d:bd:f8:45:10:9b:e1:76:e1:57:41:32:44:33:13: 44:d8:2a:e5:95:39:39:a5:3e:47:7a:df:94:b3:f4: 22:c7:bf:04:4f:6c:5e:d5:8a:ad:16:7c:7a:73:66: 3d:fb:c9:eb:c8:86:7c:bd:bf:15:70:30:67:5a:94: bc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:03:FB:E1:54:2D:0F:89:7D:94:C6:F8:B1:E3:0A:36:FE:AD:01:7F X509v3 Authority Key Identifier: keyid:A3:42:B8:1D:AA:F7:79:AB:A1:6D:32:B6:FB:0B:83:0F:85:0B:4F:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:67:19:f4:1d:4b:ac:aa:39:4a:2f:e7:0a:cd:27:79:79:68: ea:1d:d4:b6:71:cd:12:bd:c8:01:97:01:3a:79:b9:c7:f3:ef: 64:71:08:f0:0a:e3:e2:13:33:9e:fd:c3:e2:d6:59:d9:af:18: 8b:f4:2f:49:bd:55:14:73:ef:7c:7b:be:7c:3d:62:90:c8:cc: dc:21:92:ee:7d:db:0a:1d:d3:67:ea:59:0e:6b:be:7b:e8:8f: 73:8c:0d:a9:7e:14:05:d6:bf:82:0d:91:8a:f8:21:c0:06:69: 5c:b7:31:a6:8e:22:9c:ef:3f:1d:5a:7b:55:9d:09:61:08:92: c0:01:fd:3f:14:c2:ed:70:e0:4a:ab:2c:d7:45:01:57:0d:66: 40:eb:47:ae:d3:82:d3:d3:39:10:4a:46:46:a3:a7:cb:7e:a0: 5f:ae:38:f3:d9:e9:9b:d8:c1:dd:9f:c0:0f:f8:28:c4:92:54: b1:f8:98:5e:f8:23:f7:e1:33:6e:77:9d:50:97:93:71:3e:d0: 2c:a4:0f:49:54:7a:5e:e6:5b:84:02:83:52:ed:1b:37:37:68: 68:9a:d6:e0:1d:62:03:7c:d6:ea:f1:e0:db:8f:c7:6f:45:8a: b0:0c:6d:f9:0b:ad:4a:36:94:a3:1e:b4:15:42:42:b2:f3:14: 21:1b:eb:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEyMDUxMTAvBgNVBAUTKEEzNDJCODFEQUFGNzc5QUJBMTZEMzJCNkZCMEI4MzBG ODUwQjRGRjAwHhcNMjUwNzAyMTkwMTM0WhcNMjUwNzA5MTkwMTM0WjAYMRYwFAYD VQQDEw02ODY1ODIwZS1jOWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbBYPDxyfHoDp1yKO2eFw8XgE09A3dqa73LNpQlNIG6gZRmkDsCVBGSJcWFq 3O+Z/B4EQgNd67Th8kg795t69f5CqkrxQ3Uc/cd8GQV8YOEsuG5eyPyfQoiRyVsS Q+AoDlbLheyCJ50ruckRgEpsJPSBHWsbZ366+sKpQjmAQKVg0BTfTPiMqdVigPCo x5/CLbQdD5Ajr9lhKCmL1XD7HqL9LxSSJxHREFER0i5SVPZtE+b+6l1sE6tcfJjx 5CkiDC9tvfhFEJvhduFXQTJEMxNE2CrllTk5pT5Het+Us/Qix78ET2xe1YqtFnx6 c2Y9+8nryIZ8vb8VcDBnWpS8PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkD++FU LQ+JfZTG+LHjCjb+rQF/MB8GA1UdIwQYMBaAFKNCuB2q93mroW0ytvsLgw+FC0/w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTIwNS83RDIzMUUwNDFB NTUxMUVBODgwNDIyMTFDNEY5QUUwMi9vMEs0SGFyM2VhdWhiVEsyLXd1REQ0VUxU X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28wSzRIYXIzZWF1aGJUSzItd3VERDRVTFRfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTIwNS83RDIzMUUwNDFBNTUxMUVBODgwNDIyMTFDNEY5QUUwMi9vMEs0SGFyM2Vh dWhiVEsyLXd1REQ0VUxUX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTZxn0HUusqjlKL+cKzSd5eWjqHdS2cc0SvcgBlwE6ebnH8+9kcQjw CuPiEzOe/cPi1lnZrxiL9C9JvVUUc+98e758PWKQyMzcIZLufdsKHdNn6lkOa757 6I9zjA2pfhQF1r+CDZGK+CHABmlctzGmjiKc7z8dWntVnQlhCJLAAf0/FMLtcOBK qyzXRQFXDWZA60eu04LT0zkQSkZGo6fLfqBfrjjz2emb2MHdn8AP+CjEklSx+Jhe +CP34TNud51Ql5NxPtAspA9JVHpe5luEAoNS7Rs3N2homtbgHWIDfNbq8eDbj8dv RYqwDG35C61KNpSjHrQVQkKy8xQhG+te -----END CERTIFICATE-----Generated at Thu Jul 3 02:55:29 2025 by rpki-client